Tag
guardd is an open-source Linux endpoint detection tool that uses eBPF events and Isolation Forest to spot anomalous process/network behavior in 60-second windows, but struggles with browser-related false positives.